Check metadata-complete=true leads to @ServletSecurity being ignored
authormarkt <markt@13f79535-47bb-0310-9956-ffa450edef68>
Fri, 4 Mar 2011 11:23:43 +0000 (11:23 +0000)
committermarkt <markt@13f79535-47bb-0310-9956-ffa450edef68>
Fri, 4 Mar 2011 11:23:43 +0000 (11:23 +0000)
git-svn-id: https://svn.apache.org/repos/asf/tomcat/trunk@1077883 13f79535-47bb-0310-9956-ffa450edef68

test/org/apache/catalina/core/TestStandardWrapper.java
test/webapp-3.0/WEB-INF/web.xml

index e199a50..4293eb8 100644 (file)
@@ -92,6 +92,26 @@ public class TestStandardWrapper extends TomcatBaseTest {
         assertEquals(403, rc);
     }
 
+    public void testSecurityAnnotationsMetaDataPriority() throws Exception {
+
+        // Setup Tomcat instance
+        Tomcat tomcat = getTomcatInstance();
+        
+        File appDir = new File("test/webapp-3.0");
+        tomcat.addWebapp(null, "", appDir.getAbsolutePath());
+        
+        tomcat.start();
+        
+        ByteChunk bc = new ByteChunk();
+        int rc;
+        rc = getUrl("http://localhost:" + getPort() +
+                "/testStandardWrapper/securityAnnotationsMetaDataPriority",
+                bc, null, null);
+        
+        assertEquals("OK", bc.toString());
+        assertEquals(200, rc);
+    }
+
     private void doTest(String servletClassName, boolean usePost,
             boolean useRole, boolean expect200) throws Exception {
 
index 634d390..c67fc9d 100644 (file)
       <url-pattern>/bug49nnn/bug49726b.jsp</url-pattern>
     </jsp-property-group>
   </jsp-config>
+  
+  <servlet>
+    <servlet-name>DenyByAnnotation</servlet-name>
+    <servlet-class>org.apache.catalina.core.TestStandardWrapper$DenyAllServlet</servlet-class>
+  </servlet>
+  <servlet-mapping>
+    <servlet-name>DenyByAnnotation</servlet-name>
+    <url-pattern>/testStandardWrapper/securityAnnotationsMetaDataPriority</url-pattern>  
+  </servlet-mapping>
+
 </web-app>
\ No newline at end of file